265 matches found
File Upload Vulnerability in Beijing Milwaukee Technology Company's Document Library System (Open Source Version)
Library system open source version is a document sharing, selling library CMS system . A file upload vulnerability exists in the open-source version of the library system of Beijing MirWeiye Technology Company, which can be exploited by an attacker to upload malicious files to obtain server contr...
Kaixin Electronic Document Inventory in File Upload Vulnerability
Qixing electronic document library can be used to store departmental manuals, system specifications, mechanical drawings and other edoc. The Qixing Electronic Document Library suffers from a file upload vulnerability, which can be exploited by an attacker to upload a malicious file and take contr...
Kaixin Electronic Document Inventory in Arbitrary File Download Vulnerability
Qixing electronic document library can be used to store departmental manuals, system specifications, mechanical drawings and other edoc. The Qixing Electronic Document Library is vulnerable to an arbitrary file download vulnerability, which can be exploited by an attacker to download any file on...
MS15-022: Description of the security update for SharePoint Server 2013 and SharePoint Foundation 2013: March 10, 2015
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or preview a specially crafted Microsoft Word file in an affected version of Office.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could...
WordPress memphis-documents-library plugin input validation error vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. memphis-documents-library is a document library plugin for organizing and distributing documents used in it. An input validation error...
SQL Injection Vulnerability in the Frontend Po***.aspx Page of eDoc Electronic Document Library
Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic document library eDoc foreground Po.aspx page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...
Arbitrary File Download Vulnerability in eDoc Frontend of Electronic Document Library
Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic document library eDoc foreground exists arbitrary file download vulnerability, attackers can use the vulnerability to obtain sensitive documents...
Description of the security update for SharePoint Enterprise Server 2016: August 14, 2018
None None...
CVE-2018-5195
Hancom NEO versions 9.6.1.5183 and earlier have a buffer Overflow vulnerability that leads remote attackers to execute arbitrary commands when performing the hyperlink Attributes in document...
UBUNTU-CVE-2017-9433
Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx...
LVRTC eParakstitajs 3 and edoc-libraries arbitrary file write vulnerability
LVRTC eParakstitajs 3 and edoc-libraries are both products of the Latvian company LVRTC. The former is an electronic signature solution for insurance use; the latter is a file system for specially created and produced EDOC documents. An arbitrary file write vulnerability exists in LVRTC...
Wordpress Memphis Document Library 插件3.1.5-mdocs-img-preview-任意文件下载漏洞
No description provided by source...
WordPress Memphis Document Library Plugin Directory Traversal Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...
WordPress Memphis Document Library 3.1.5 Arbitrary File Download
Exploit Title: Arbitrary file download in Memphis Document Library 3.1.5 Google Dork: inurl:"mdocs-posts" -site:wordpress.org Date: 22/03/2016 Exploit Author: Felipe Molina @felmoltor Vendor Homepage: https://wordpress.org Software Link:...
WordPress Memphis Document Library Plugin 3.1.5 - Arbitrary File Download
Memphis Document Library plugin is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Update the plugin...
WordPress Plugin Memphis Document Library 3.1.5 - Arbitrary File Download
Exploit Title: Arbitrary file download in Memphis Document Library 3.1.5 Google Dork: inurl:"mdocs-posts" -site:wordpress.org Date: 22/03/2016 Exploit Author: Felipe Molina @felmoltor Vendor Homepage: https://wordpress.org Software Link:...
WordPress Plugin Memphis Document Library 3.1.5 - Arbitrary File Download
WordPress Plugin Memphis Document Library 3.1.5 - Arbitrary File Download Exploit Title: Arbitrary file download in Memphis Document Library 3.1.5 Google Dork: inurl:"mdocs-posts" -site:wordpress.org Date: 22/03/2016 Exploit Author: Felipe Molina @felmoltor Vendor Homepage: https://wordpress.org...
WordPress Memphis Document Library 3.1.5 Plugin - Arbitrary File Download
Exploit for php platform in category web applications Exploit Title: Arbitrary file download in Memphis Document Library 3.1.5 Google Dork: inurl:"mdocs-posts" -site:wordpress.org Date: 22/03/2016 Exploit Author: Felipe Molina @felmoltor Vendor Homepage: https://wordpress.org Software Link:...
Memphis Document Library Plugin <= 3.1.5 - Arbitrary File Download
The function "mdocsimgpreview" is in charge of downloading image previews previously uploaded by the administrator, but it does not sanitize the file path being downloaded, thus, allowing to download arbitrary files in the file system. The vulnerable GET parameter is "mdocs-img-preview". The...
Memphis Document Library Plugin <= 3.1.5 - Arbitrary File Download
The function "mdocsimgpreview" is in charge of downloading image previews previously uploaded by the administrator, but it does not sanitize the file path being downloaded, thus, allowing to download arbitrary files in the file system. The vulnerable GET parameter is "mdocs-img-preview". The...